aboutsummaryrefslogtreecommitdiff
AgeCommit message (Expand)AuthorFilesLines
2011-04-26Added more packet ID debug info at debug level 3 for debuggingJames Yonan6-28/+142
2011-04-26Added ./configure --enable-osxipconfig option for Mac OS X which willJames Yonan3-2/+26
2011-04-26Added "auth-token" client directive, which is intended to beJames Yonan11-13/+113
2011-04-26win/sign.py now accepts an optional tap-dir argument.James Yonan1-4/+8
2011-04-26Version 2.1.3nJames Yonan1-1/+1
2011-04-26Client will now try to reconnect if no push reply receivedJames Yonan4-3/+20
2011-04-26Extended "client-kill" management interface command (server-side)James Yonan7-19/+53
2011-04-26Fixed bug introduced in r7031 that might cause this error message:James Yonan1-6/+16
2011-04-26Fixed issue where a client might receive multiple push replies fromJames Yonan3-2/+14
2011-04-26env_filter_match now includes the serial number of all certsJames Yonan1-1/+1
2011-04-25Reduce log verbosity at level 3, with a focus on removing excessive log verbo...James Yonan6-27/+33
2011-04-25Added optional journal directory argument to "port-share" directive, for repo...James Yonan8-33/+131
2011-04-25Added --enable-lzo-stub configure option to build an OpenVPN client without L...James Yonan7-14/+85
2011-02-18Added "client-nat" option for stateless, one-to-oneJames Yonan15-17/+490
2011-02-14Properly handle certificate serial numbers > 32 bits.James Yonan2-4/+12
2011-02-14Fixes to r6925.James Yonan1-3/+3
2011-02-14Implemented get_default_gateway_mac_addr for Mac OS X (previously,James Yonan3-59/+125
2011-01-18Fixed minor compile issue triggered on builds whereJames Yonan1-1/+1
2011-01-10* added --management-up-down option to allow management interfaceJames Yonan6-21/+55
2011-01-05Added --x509-track option.James Yonan10-4/+186
2010-12-13Misc fixes to r6708.James Yonan8-51/+72
2010-12-10Minor addition of logging info before and afterJames Yonan2-1/+3
2010-12-09Added "management-external-key" option. This option can be usedJames Yonan10-59/+433
2010-11-16Fixes to prevent compile breakage when --disable-crypto is used.James Yonan2-5/+2
2010-11-16In verify_callback, the subject var should be freed by OPENSSL_free,James Yonan2-3/+3
2010-10-28Version 2.1.3bJames Yonan1-1/+1
2010-10-24Make base64.h have the same conditional compilation expression asJames Yonan1-1/+1
2010-10-24Implement challenge/response authentication support in client mode,James Yonan7-24/+229
2010-10-23Fixed initialization bug in route_list_add_default_gatewayJames Yonan1-0/+2
2010-09-01Added --proto-force directive.James Yonan5-2/+35
2010-08-31Don't configure Linux tun/tap txqueuelen setting if OpenVPNJames Yonan1-1/+1
2010-08-29Allow PKCS12 file content to be included inline in configuration file,James Yonan3-10/+39
2010-08-20Attempt to fix issue where domake-win build system was not properlyv2.1.3James Yonan11-203/+191
2010-08-15Windows security issue:v2.1.2James Yonan4-3/+116
2010-08-10Added warning about tls-remote in man page.James Yonan1-0/+7
2010-08-09Distribute win directory (Python/MSVC-based build system)James Yonan1-1/+2
2010-07-27Added "net stop dnscache" and "net start dnscache" in frontJames Yonan6-8/+34
2010-07-27Fixed an issue where application payload transmissions on theJames Yonan6-12/+54
2010-07-26Fixed typo: missing comment close.James Yonan1-1/+1
2010-07-16Added win/build_exe.py script, which is similar toJames Yonan2-21/+38
2010-07-16Added --register-dns option for Windows.James Yonan9-11/+79
2010-07-12Implemented multi-address DNS expansion on the network field of routeJames Yonan4-16/+85
2010-07-10Version 2.1.1kJames Yonan1-1/+1
2010-07-10Fixed bug in proxy fallback capability where openvpn.exe couldJames Yonan2-18/+22
2010-07-10Added support for MSVC debugging of openvpn.exe in settings.in:James Yonan3-7/+16
2010-06-10Fixed issue where bad creds provided by the management interfaceJames Yonan2-3/+6
2010-06-01Implemented a key/value auth channel from client to server.James Yonan14-9/+248
2010-05-24Implemented http-proxy-override and http-proxy-fallback directives to make itJames Yonan14-72/+565
2010-05-11Minor fixes to recent HTTP proxy changes:James Yonan3-5/+5
2010-05-11Proxy improvements:James Yonan10-101/+676
2010-05-09Fixed issue on Windows with MSVC compiler, where TCP_NODELAY supportJames Yonan1-1/+1
2010-04-28Updated copyright date to 2010.James Yonan157-160/+160
2010-04-22Added Python-based build system for Windows inJames Yonan24-26/+609
2010-04-17Minor change to doclean script:James Yonan1-1/+0
2010-04-16Management interface performance optimizations:James Yonan6-12/+161
2010-03-31Updated MSVC build scripts to Visual Studio 2008:James Yonan17-530/+491
2010-03-30Set socket buffers (SO_SNDBUF and SO_RCVBUF) immediately afterJames Yonan2-4/+5
2010-03-17Version 2.1.1cJames Yonan2-2/+2
2010-03-12Modified ">PASSWORD:Verification Failed" management interfaceJames Yonan4-6/+9
2010-03-12Added stub directive "remote-ip-hint".James Yonan1-0/+5
2010-03-12Trivial fix to proxy.c -- #define proxy auth type as UP_TYPE_PROXY.James Yonan1-1/+3
2010-03-06Fixed an issue where if reneg-sec was set to 0 on the client,James Yonan1-2/+5
2010-02-26Fixed an issue in the Management Interface that could causeJames Yonan1-6/+15
2010-01-16Version 2.1.1bjames1-1/+1
2010-01-16Don't advance the connection list on AUTH_FAILED errors.james1-0/+1
2010-01-16Fixed an issue where AUTH_FAILED was not being properly deliveredjames2-13/+35
2010-01-12When aborting in a non-graceful way, try to execute do_close_tun injames3-1/+20
2009-12-11Fixed some breakage in openvpn.spec (which is required to build anv2.1.1james3-2/+12
2009-12-11Version 2.1.0v2.1.0james4-2/+19
2009-12-11Clarified that TAP-Win32 driver is licensed under GPL 2.james19-94/+19
2009-12-11Documented --multihome in the man page.james1-0/+9
2009-12-10Fixed a couple issues in sample plugins auth-pam.c and down-root.c:james2-2/+6
2009-11-20Version 2.1_rc22v2.1_rc22james2-1/+13
2009-11-19Fixed a client-side bug that occurred when the "dhcp-pre-release"james7-33/+141
2009-11-13Increase MAX_CERT_DEPTH to 16 (from 8), and when exceeded,james3-3/+6
2009-11-12Version 2.1_rc21v2.1_rc21james3-2/+18
2009-10-25Version 2.1_rc20ajames1-1/+1
2009-10-25On server, lock client-provided certs against mid-session TLSjames3-5/+156
2009-10-25Change to doval valgrind script. The openvpn command parameter is nowjames2-1/+14
2009-10-24On server, lock session username against changes in mid-session TLSjames2-3/+31
2009-10-16Added "setenv GENERIC_CONFIG" directive, for generic configsjames1-0/+5
2009-10-07Fixed issue where some .svn directories were being inadvertentlyv2.1_rc20james1-1/+1
2009-10-01Version 2.1_rc20james2-1/+51
2009-10-01client-kill management interface command, when issued on server, willjames6-7/+41
2009-10-01Minor fix: management interface shouldn't echo 'load-stats' commands tojames1-1/+1
2009-09-29Added the ability for the server to provide a custom reason stringjames8-14/+84
2009-09-28Fixed a bug introduced in r4436 (2.1_rc17) where using thejames1-2/+2
2009-09-28Added --server-poll-timeout option : when polling possible remotejames8-0/+70
2009-09-27Eliminated the limitation on the number of options that can be pushedjames16-115/+271
2009-09-17The maximum number of "route" directives (specified in the configjames8-30/+86
2009-09-16Modified client to send a PUSH_REQUEST message to server 1 secondjames3-5/+14
2009-09-08Updated version number to 2.1_rc19c.james1-1/+1
2009-09-04Added "setcon" directive for interoperability with SELinuxjames6-4/+104
2009-08-24Added new ./configure flags:james3-3/+23
2009-08-24Added PLATFORM-SPECIFIC comment tag to platform-specific functionsjames1-4/+4
2009-08-23Added "load-stats" management interface command to get globaljames2-0/+27
2009-08-22Added --remote-random-hostname option.james6-10/+89
2009-08-19Fixed ifconfig command for "topology subnet" on FreeBSD (Stefan Bethke).james1-6/+10
2009-08-19Fixed build problem when ./configure --disable-server is used.james1-0/+2
2009-07-16OpenVPN version 2.1_rc19 releasedv2.1_rc19james2-1/+13
2009-06-22In Windows TAP driver, refactor DHCP/ARP packet injection code tojames7-28/+154
2009-06-22Rename generated tapdrvr.cod to a unique name to avoid the issue wherejames1-0/+1
2009-06-09In configure.ac, use datadir instead of datarootdir for compatibilityjames1-1/+1
2009-06-07Version 2.1_rc18v2.1_rc18james2-2/+9
2009-06-07Fixed issue introduced in r4475 (2.1-rc17) where cryptoapi.c changejames1-0/+2
2009-06-01Fixed compile error on ./configure --enable-smalljames1-0/+1
2009-06-01Version 2.1_rc17v2.1_rc17james2-2/+45
2009-05-30Update copyright to 2009.james157-160/+160
2009-05-30Fixed bug where the remote_X environmental variables were not beingjames1-2/+2
2009-05-30Fixed issue of symbol conflicts interfering with Windows CryptoAPIjames4-8/+7
2009-05-24Added new 'autolocal' redirect-gateway flag. When enabled, the OpenVPNjames6-33/+119
2009-05-23Added "redirect-private" option which allows private subnetsjames3-69/+80
2009-05-21Fixed race condition in management interface recv code onjames3-5/+6
2009-05-21Reduce the debug level (--verb) at which received management interfacejames1-1/+1
2009-05-18Version 2.1_rc16v2.1_rc16james2-1/+54
2009-05-13Updated Windows build scripts to package openssl-0.9.8k,james4-21/+21
2009-04-13Added errors-to-stderr option. When enabled, fatal errorsjames3-6/+28
2009-04-10Allow "management-client" directive to be usedjames5-44/+91
2009-04-09Added the ability to read the configuration filejames1-2/+6
2009-02-13install-win32/buildinstaller will now always sign executablejames1-1/+1
2009-01-27Fixed issue involving an #ifdef in a macro reference that breaks early gccjames1-2/+5
2009-01-27Updated common.h types for _WIN64.james1-0/+8
2009-01-27Updated configure.ac to work on MinGW.james1-53/+58
2009-01-27Fixed some compile-time warnings.james4-5/+7
2009-01-27Fixed some issues with C++ style comments that leaked into the code.james2-6/+6
2009-01-21Version 2.1_rc15ejames2-1/+6
2009-01-01In Windows installer generator, don't sign the installer .exejames1-1/+1
2008-12-26Added daemon_start_time and daemon_pid environmental variables.james6-6/+22
2008-12-25Fixed issue where SIGUSR1 restarts would fail if privatejames3-4/+7
2008-12-23Version 2.1_rc15bjames1-1/+1
2008-12-18Added n_clients environmental variable to information passedjames1-4/+20
2008-12-18Added "nclients" command to management interface tojames4-0/+37
2008-12-01Added MultiFileExtract capability to Windows Installer.james4-128/+16
2008-11-30Added ExtractAuxFile capability to Windows Installer.james4-2/+136
2008-11-20Added new management interface command "pid" to show thejames2-0/+10
2008-11-20Added optional "nogw" (no gateway) flag to --server-bridgejames5-84/+101
2008-11-19Version 2.1_rc15v2.1_rc15james2-1/+28
2008-11-19Fixed issue introduced in 2.1_rc14 that may cause ajames1-1/+1
2008-11-18Added --tcp-nodelay option: Macro that sets TCP_NODELAY socketjames5-0/+76
2008-11-18Cleaned up man page synopsis.james1-273/+2
2008-11-18Minor options check fix: --no-name-remapping is ajames1-0/+2
2008-11-18Added server-side --opt-verify option: clients that connectjames4-0/+29
2008-11-18Added --prng option to control PRNG (pseudo-randomjames9-21/+136
2008-11-17Version 2.1_rc14v2.1_rc14james2-8/+8
2008-11-17* Added additional method parameter to --script-security to preservejames14-105/+383
2008-11-16Interim release.james2-1/+87
2008-11-05Minor fix to previous commit (r3476).james1-3/+3
2008-11-04Added config file option "setenv FORWARD_COMPATIBLE 1" to relaxjames3-3/+33
2008-11-03Fixed revoke-full to deal with issue arising from additionjames1-1/+2
2008-11-03Fixed some ifconfig-pool issues that precludedjames3-10/+12
2008-10-31Updated docs to reflect the addition ofjames3-3/+4
2008-10-31Added --no-name-remapping option to allow Common Name, X509 Subject,james4-3/+42
2008-10-31Added --status-version 3 which is the same as version 2james2-25/+28
2008-10-28Modified pkitool to allow flexibility in separatingjames1-14/+20
2008-10-28Added man page entry for new environmental variable setjames1-0/+37
2008-10-28Added server-side --auth-user-pass-optional directive, to allowjames6-21/+57
2008-10-28Change to pkitool/openssl.cnf so that calling scripts canjames2-1/+16
2008-10-28Save X509 Subject fields to environment, using the naming convention:james1-0/+54
2008-10-27Fixed informational message in ssl.c to properly indicatejames1-1/+5
2008-10-24Extended Management Interface "bytecount" commandjames5-29/+153
2008-10-24Added optional files SAMPCONF_CONF2 (second sample configurationjames2-0/+14
2008-10-17Modified Windows domake-win build system to write all openvpn.nsijames5-49/+94
2008-10-15Added additional warning messages about --script-security 2james4-3/+10
2008-10-14Added AC_GNU_SOURCE to configure.ac to enable struct ucred,james3-59/+324
2008-10-08Version 2.1_rc13v2.1_rc13james10-30/+43
2008-10-06Copyright notice changed to reflect change in name ofjames157-198/+194
2008-09-30Management interface can now listen on a unixjames16-45/+693
2008-09-23Version 2.1_rc12v2.1_rc12james2-1/+10
2008-09-19Fixed --lladdr bug introduced in 2.1-rc9 where input validation codejames3-2/+42
2008-09-15Patched Makefile.am so that the new t_cltsrv-down.sh script becomesjames2-2/+3
2008-09-15Version 2.1_rc11v2.1_rc11james4-10/+38
2008-09-10Version 2.1_rc10v2.1_rc10james2-1/+94
2008-09-08Version 2.1_rc9bjames1-1/+1
2008-09-08Fixed bug in intra-session TLS key rollover that was introduced withjames3-18/+68
2008-09-06Modified ip_or_dns_addr_safe, which validates pulled DNS names,james2-4/+16
2008-09-062.1_rc8 and earlier did implicit shell expansion on scriptjames9-363/+350
2008-09-04Added --allow-pull-fqdn option which allows client to pull DNS namesjames5-12/+45
2008-08-11Fixed minor compile issue in ntlm.c (mid-block declaration).james1-2/+4
2008-08-11LZO compression buffer overflow errors will now invalidatejames1-1/+7
2008-08-10Workaround bug in OpenSSL 0.9.6b ASN1_STRING_to_UTF8, whichjames2-5/+2
2008-08-10Fixed build issue with ./configure --disable-socks --disable-http.james3-4/+4
2008-08-10Tagged security fix in 2.1-rc9 as CVE-2008-3459.james1-0/+1
2008-08-10Updated openvpn/t_cltsrv.sh (used by "make check") to conform to newjames2-14/+44
2008-08-05Reverted r3181, accomplish the same thing via a special casejames3-21/+16
2008-08-05Workaround for MinGW autoconf issue where HAVE_SETSOCKOPT,james1-0/+12
2008-08-05Added additional warnings to flag common gotchas:james5-27/+133
2008-08-04Fixed minor issue with --redirect-gateway bypass-dhcp or bypass-dnsjames1-1/+1
2008-08-02Added "--server-bridge" (without parameters) to enablejames14-34/+427
2008-08-01Version 2.1_rc9v2.1_rc9james1-2/+2
2008-07-31In Windows build, package a statically linked openssl.exe to work aroundjames4-13/+6
2008-07-31Updated ChangeLog and version number.james2-1/+22
2008-07-27Added additional warnings for:james1-0/+7
2008-07-27Added additional defensive programming to buffer.[ch] functions.james2-26/+118
2008-07-27Added a warning message when passwords are cached in memory.james1-0/+4
2008-07-26Perform additional input validation on options pulledjames7-64/+230
2008-07-26Fixed compiler warnings in Windows build (MinGW).james6-5/+8
2008-07-26Completely revamped the system for calling external programs and scripts:james23-420/+1098
2008-07-23Added argv_x functions to buffer.[ch] to be used to safely buildjames3-0/+265
2008-07-19buf_printf will now return false on errors, such as truncationjames2-3/+8
2008-07-19Modified extract_x509_field_ssl to return a status value indicatingjames1-37/+41